From: Daniel F. Dickinson Date: Sun, 5 Jul 2026 11:47:49 +0000 (-0400) Subject: nut: enable peer certificate verification X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=04533d520674578e01d4c05553077deadd4e3797;p=openwrt-packages.git nut: enable peer certificate verification Enable CERTVERIFY, CERTREQUEST, and related options for requiring verified certificates from peers. While we are at it, alphabetize the list of PKG_CONFIG_DEPENDS in the Makefile Signed-off-by: Daniel F. Dickinson --- diff --git a/net/nut/Config.in b/net/nut/Config.in index 884319c71..2dfc3c9c3 100644 --- a/net/nut/Config.in +++ b/net/nut/Config.in @@ -20,6 +20,14 @@ 3493 from upsd will no longer net you interesting passwords. default y + config NUT_SSL_CERTVERIFY + depends on PACKAGE_nut && (NUT_SSL || NUT_SSL_NSS) + bool "Build with support for certificate verification when using SSL" + help + When using SSL, enables configuration options for verification of peer's + certificate before connecting to the peer. + default y + config NUT_DRIVER_USB depends on PACKAGE_nut bool "Build with support for USB drivers" diff --git a/net/nut/Makefile b/net/nut/Makefile index dfa31198e..d4bb8195d 100644 --- a/net/nut/Makefile +++ b/net/nut/Makefile @@ -23,13 +23,14 @@ PKG_MAINTAINER:=Daniel F. Dickinson PKG_INSTALL:=1 PKG_CONFIG_DEPENDS:= \ + CONFIG_PACKAGE_nut-web-cgi \ + CONFIG_NUT_DRIVER_NEON \ + CONFIG_NUT_DRIVER_SERIAL \ CONFIG_NUT_DRIVER_SNMP \ CONFIG_NUT_DRIVER_USB \ - CONFIG_NUT_DRIVER_SERIAL \ - CONFIG_NUT_DRIVER_NEON \ - CONFIG_NUT_SSL_NSS \ CONFIG_NUT_SSL \ - CONFIG_PACKAGE_nut-web-cgi + CONFIG_NUT_SSL_CERTVERIFY \ + CONFIG_NUT_SSL_NSS include $(INCLUDE_DIR)/package.mk @@ -609,6 +610,7 @@ CONFIGURE_ARGS += \ $(if $(CONFIG_NUT_SSL),--with-ssl=openssl) \ $(if $(CONFIG_NUT_SSL_NSS),--with-ssl=nss,--without-nss) \ $(if $(CONFIG_NUT_SSL),,$(if $(CONFIG_NUT_SSL_NSS),,--without-ssl)) \ + $(if $(CONFIG_NUT_SSL)$(CONFIG_NUT_SSL_NSS),$(if $(CONFIG_NUT_SSL_CERTVERIFY),--with-ssl-client-validation,--without-ssl-client-validation)) \ --without-libltdl \ --enable-docs-changelog=no \ --without-macosx_ups \